Deletion Deadlines and Tenant Isolation in Private Object Storage for Signed Uploads

Use one private bucket per tenant, and let the explicit deletion deadline — not the upload flow —...